$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: a/qu3UyD18SUgrZg0SCpMOAk6Dao2KosCEVUjtskDaE= Subject key identifier: F1:EB:FB:26:84:BB:32:1A:C2:84:2E:E0:B3:95:6C:1E:85:8B:3A:20 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 0198D773CD54304BA803C9FCCECBA5499C4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1669 Signing time: Sat 23 Aug 2025 15:02:27 +0000 Manifest this update: Sat 23 Aug 2025 15:02:27 +0000 Manifest next update: Sun 24 Aug 2025 15:02:27 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: wEanDOZT89/v1N+jMAjO+QooGwQdAM+k9/r7CLrj2GU=) 3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=) 4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=) 10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=) 11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d7:73:cd:54:30:4b:a8:03:c9:fc:ce:cb:a5:49:9c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Aug 23 15:02:27 2025 GMT Not After : Aug 24 15:02:27 2025 GMT Subject: CN=f1ebfb2684bb321ac2842ee0b3956c1e858b3a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:10:ca:e7:a5:38:7f:d8:ee:1e:16:1b:6c: f8:a1:aa:c4:ff:55:3f:6b:14:91:f4:27:ec:9f:53: e1:e6:8e:1b:56:d8:73:7a:1f:d8:8e:58:7e:b7:b7: b5:ad:7e:67:22:e7:93:69:61:a9:46:0d:b3:44:b3: dd:f9:55:30:ea:a3:e1:82:b4:22:cf:c6:7b:13:e4: 87:f5:27:f4:52:45:16:f2:79:49:63:d8:55:c0:dd: 58:92:72:a2:16:a6:9f:cd:4f:f2:fc:f3:10:ba:18: f0:2d:a3:28:c9:15:c0:f8:a0:8e:f4:e1:45:bb:90: 1e:35:b6:cc:79:e5:90:09:88:4d:14:e5:73:76:4f: bb:94:1f:c5:06:bb:8f:bb:43:c8:32:56:e8:8a:3a: ef:07:bd:5c:2e:62:56:17:b7:15:c8:ba:78:30:91: 91:eb:49:9a:4b:1c:72:2e:e2:7f:34:7c:77:6b:35: ed:b0:d3:b4:4c:3c:f6:9a:13:ac:5c:ab:4b:73:a7: 15:07:b1:90:16:2e:99:c4:48:57:9a:5f:3a:62:f3: 14:9a:62:7d:e1:15:f3:b4:43:c0:ff:31:cc:42:4e: ca:4e:6f:86:90:be:b0:2c:2e:44:cb:88:57:2c:b7: a6:32:97:d2:4b:75:e8:78:60:fa:ed:13:49:b8:b1: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EB:FB:26:84:BB:32:1A:C2:84:2E:E0:B3:95:6C:1E:85:8B:3A:20 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:08:4c:a7:43:d8:9c:a2:6e:75:11:e2:94:81:e2:1f:8d:bd: d5:23:77:ac:22:cb:c0:d1:d3:6b:b7:ad:ae:6e:37:73:b7:27: bb:a2:3a:8a:c0:c6:db:5b:fc:47:d3:d7:dc:80:ff:7e:d4:33: b5:a1:7b:56:3c:f9:41:0a:c2:fc:14:d6:22:4c:ba:5d:f8:64: 1e:84:19:0f:d5:e6:f4:2e:a0:51:98:54:21:c5:80:5e:34:bc: 22:d5:03:ec:f6:97:a1:ee:24:e9:c3:de:bc:34:1d:cd:6b:01: b2:16:aa:af:6a:e2:73:7f:8b:f1:e5:4d:d7:93:42:72:45:78: 12:87:fe:21:8f:71:51:11:3e:a8:a3:a6:17:3e:4b:c6:f8:20: 5a:13:ba:7e:8b:1d:ee:09:a7:39:08:66:97:57:60:19:25:5c: aa:dc:a6:55:c2:5a:5a:25:7b:31:53:10:63:fd:0f:d1:1f:f9: b7:7c:53:43:de:84:c7:f1:be:48:ca:26:d8:43:0d:27:80:04: 75:c3:d3:94:ac:bd:9f:70:17:70:1e:dc:6c:b8:c6:5a:b5:6a: 58:b1:f1:44:78:32:89:12:e5:24:de:ff:55:c5:cf:19:a8:10: 1e:cb:c6:a7:b2:ff:01:87:04:0f:db:4a:01:32:46:c4:17:76: e6:16:9d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjXc81UMEuoA8n8zsulSZxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUwODIzMTUwMjI3WhcNMjUwODI0MTUwMjI3WjAzMTEwLwYDVQQD EyhmMWViZmIyNjg0YmIzMjFhYzI4NDJlZTBiMzk1NmMxZTg1OGIzYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDsQyuelOH/Y7h4WG2z4oarE/1U/ axSR9Cfsn1Ph5o4bVthzeh/Yjlh+t7e1rX5nIueTaWGpRg2zRLPd+VUw6qPhgrQi z8Z7E+SH9Sf0UkUW8nlJY9hVwN1YknKiFqafzU/y/PMQuhjwLaMoyRXA+KCO9OFF u5AeNbbMeeWQCYhNFOVzdk+7lB/FBruPu0PIMlboijrvB71cLmJWF7cVyLp4MJGR 60maSxxyLuJ/NHx3azXtsNO0TDz2mhOsXKtLc6cVB7GQFi6ZxEhXml86YvMUmmJ9 4RXztEPA/zHMQk7KTm+GkL6wLC5Ey4hXLLemMpfSS3XoeGD67RNJuLHYxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHr+yaEuzIawoQu4LOVbB6FizogMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaghMp0PY nKJudRHilIHiH4291SN3rCLLwNHTa7etrm43c7cnu6I6isDG21v8R9PX3ID/ftQz taF7Vjz5QQrC/BTWIky6XfhkHoQZD9Xm9C6gUZhUIcWAXjS8ItUD7PaXoe4k6cPe vDQdzWsBshaqr2ric3+L8eVN15NCckV4Eof+IY9xURE+qKOmFz5LxvggWhO6fosd 7gmnOQhml1dgGSVcqtymVcJaWiV7MVMQY/0P0R/5t3xTQ96Ex/G+SMom2EMNJ4AE dcPTlKy9n3AXcB7cbLjGWrVqWLHxRHgyiRLlJN7/VcXPGagQHsvGp7L/AYcED9tK ATJGxBd25hadBg== -----END CERTIFICATE-----Generated at Sat Aug 23 20:00:19 2025 by rpki-client